February 24, 2005

Ibbur again

Another of those weirdo emails arrived (I neglected to mention that the subject lines always contain the letters "I-b-b-u-r," either sequentially or spaced ("Ibbur," "Ib bur," "Ibb u r") and some other nonsense -- Ibb ur text or Ibb ur 32% or I bbu r followed by gibberish characters that may have been typed in Cryllic letters, or some such. This one seems to pick up the thread of the one I posted previously. It wasn't in sequence, and there were several that came in between with some sort of Ibbur heading with more or less the same format -- I dug this one, which has nothing to do with the mysterious Ash -- or much else -- out of the trash bin:

Darlin! :)

Death doesn't frighten me. There is not so much comfort in having children as there is sorrow in parting with them.

Time and money spent in helping men to do more for themselves is far better than mere giving. You don't drown by falling in the water you drown by staying there. ...

...and on and on for pages. Most of these emails read like the above example, but a small subset are different -- well, here's the example:

What the police are following up on and missing in the Ash murder investigation:

Video surveillance tape from the Museum of Victorian Morality shows journalist C.K. entering at 7:45 p.m. and leaving at 8:15 p.m. Time of murder estimated at 9 p.m. What interests police: C.K. enters empty handed, leaves with a thick envelope. Given Ash's trade in peculiar pictures of children, suspicions are, naturally, aroused.

C.K. in fact visited Ash at the non-profit Museum of Victorian Morality to get the organization's tax returns. C.K. stonewalled police until Lt. Jacoby, lead investigator, showed him photos, whereupon C.K. explained his interest in Ash: investigating allegations of tax evasion.

Regarding the tax forms, what neither C.K. nor the police noticed was the name of the man who prepared the returns: Darquier de Pellepoix.

Googling Darquier de Pellepoix...

Posted by Ideofact at February 24, 2005 12:37 AM

I remember getting one that was full of variations on "wise sayings". The email address that received it was one that I had left dozens of times as my "contact" email on a big blog, during '2003.

I have no idea who would send that kind of message, or why--but it appear to have been picked up by "bot" program crawling the web, looking for email.

Since then, I have gotten into the practice of having a "throwaway" email--one that I don't use for personal/business messages--as my "contact" for weblogs, and weblog-posting.

I don't know if that would work well for a blog-writer, though.

Posted by: steve h at February 24, 2005 12:15 PM

I strongly suspect that this is some sort of viral package, which pads itself with random text blocks harvested from MS Word documents found on the victim's machine, in an attempt to defeat Boolean spam filters. Thus, somebody's personal letter in the new sample, and some sort of paper or work of fiction in the old sample.

Posted by: Mitch H. at February 24, 2005 12:55 PM